Notifications state SSL is expiring but AutoSSL log states otherwise

[martin MHC]

Hello~

For many days (4+) the SERVER HOST domain has had notification emails stating:
[domain.co.uk] The SSL (Secure Sockets Layer) certificate for <various subparts such as "exim" / "ftp" / etc.> on “domain.co.uk” will expire in less than 30 days.

Email contains data:

Issuer:	cPanel, Inc.
Key Size:
Expires:	Tuesday, February 8, 2022 at 11:59:59 PM UTC

However, when using AutoSSL to check the domain and to renew (as usual) the AutoSSL states:

Certificate expiry: 3/24/22, 12:00 AM UTC (55.55 days from now)

Is there an issue here? I am wary as this is the server hosting domain. Thanks.


Also CPanel may want to tweak their wording as SSL is defunct and the term now is TLS (Transport Layer Security)

 

[cPRex]

Hey there! AutoSSL doesn't perform the same checks as the hostname certificate, as they are separate SSL certificates on the system. You can check the SSL for the hostname with the following command:

/usr/local/cpanel/bin/checkallsslcerts

which should match the warnings you are receiving from the automated notifications.

 

[martin MHC]

Hey there! AutoSSL doesn't perform the same checks as the hostname certificate, as they are separate SSL certificates on the system. You can check the SSL for the hostname with the following command:

/usr/local/cpanel/bin/checkallsslcerts

which should match the warnings you are receiving from the automated notifications.

Ok, thanks @cPRex ; so how would I update the hostname certificate after doing this check? Or just leave it to try and replace within 3 days?

To rephrase -- do I need to do anything specifically in this case or simply just let it autorenew at the 3day mark?

 

[cPRex]

I would just let it get to the three-day mark. The only way to force it to happen sooner would be to manually delete the SSL and request a new one, but I'd expect it to happen normally when it gets closer to the expiration.